Cybersecurity Compliance & CMMC Assessment Support

The contract seeks a subcontractor to provide comprehensive support for achieving NIST SP 800-171 compliance and readiness for CMMC Level 2 assessment, with a focus on documentation development, vulnerability scanning, and audit preparation. The work is centered on ensuring that systems and processes meet federal cybersecurity requirements and are fully prepared for third-party evaluation, with deliverables including evidence collection, policy alignment, and remediation guidance. Performance is required at the New Cumberland location with a ZIP code of 17070-5002, and the effort is tied to a Department of Defense initiative managed by the DDSP New Cumberland Facility. The solicitation, categorized under NAICS code 541512 for computer systems design services, is structured as a subcontract and carries a response deadline of August 10, 2026, with the posting date listed as July 30, 2026. The contract does not specify a set-aside type, and no point of contact information is provided. Interested parties must submit proposals via the designated DIBBS platform prior to the deadline, and the scope demands technical expertise in DoD cybersecurity frameworks, experience with NIST controls, and proven capability in conducting or preparing for CMMC assessments. All activities must align with current federal standards to ensure successful audit outcomes and sustained compliance.